Privacy Policy
This policy explains what personal data Auredane collects, why, on what legal bases, who it can reach, how long we keep it and the rights you hold over it. It applies to this website, the registration process and the platform services available to clients in the United Kingdom.
Definitions
"Personal data" is information relating to an identifiable person: name, contact details, documents, account records. "Processing" covers anything done with it, from storing to erasing. The "controller" decides why and how data is processed; a "processor" acts on the controller's instructions. In this policy "Auredane" means the platform operated for UK clients from our Manchester office.
The personal data we collect
Contact and identity data: name, email address, telephone number, date of birth and, for a full account, copies of identity and address documents plus the liveness photograph used in verification. Financial data: deposit and withdrawal records, strategy settings and transaction history. Correspondence data: the content of support and complaints requests and our replies. We collect only what the listed purposes need.
Data about your use of the site
Usage data is collected automatically as you browse: pages opened, referring page, language preference and coarse device information such as browser type. It keeps the service working, detects abuse and shows, in aggregate, which parts of the site serve visitors well. It is not used to build advertising profiles of identifiable individuals.
Cookie files
Strictly necessary cookies keep you signed in and keep forms secure; the site cannot work without them. Preference cookies remember choices such as dismissed notices, and analytics cookies measure aggregate usage where enabled. Marketing cookies are set only with your consent, and you can block cookies in your browser at any time, though blocking strictly necessary ones will prevent sign-in.
Controller and processors
Auredane is the controller for the data described here. Delivery depends on processors acting under our instructions and contracts: identity-verification providers, IT and hosting suppliers, email delivery services, and the payment and exchange venues that execute transactions you initiate. Processors may use the data only to perform their function for us.
Why we collect and use information
Answering enquiries and providing support; creating and operating your account, including legally required verification; executing the deposits, withdrawals and strategies you choose; meeting legal obligations such as record keeping; keeping the platform secure and preventing fraud; maintaining the audit trail in your dashboard; and, with consent, sending marketing you have asked for. There is no hidden secondary use.
Legal bases under the UK GDPR
Contract covers processing needed to open and operate your account and execute your instructions. Legal obligation covers identity checks, records and reports the law requires. Legitimate interests cover security, abuse prevention and aggregate improvement, balanced against your rights. Consent, withdrawable at any time, is the basis for optional marketing and for optional analytics and advertising cookies; refusing changes nothing about your access to the service.
How long data is kept
Contact enquiries without an account: up to 24 months. Marketing consent records: while active, plus the period needed to evidence it. Account records and transaction history: the life of the relationship. KYC and AML files: the statutory period UK law requires after the relationship ends. Support correspondence: up to three years. Security usage logs: up to 12 months. When a period ends, data is deleted or anonymised, except the minimum records the law names.
Transfers and disclosure of data
Data is processed in the United Kingdom and, where a supplier sits elsewhere, in countries protected adequately under the UK framework or under safeguards such as the International Data Transfer Agreement. Disclosure happens only with the processors described above, professional advisers where needed, a successor provider in a reorganisation, and regulators, courts or law enforcement where the law compels it. We never sell personal data.
Security
Data is encrypted in transit and at rest, access is limited to personnel whose roles require it and is logged, and verification documents carry additional restrictions. The user-facing view of these measures is on the security page. Where an incident merits it, affected individuals and the ICO are notified as the law requires.
Your rights as a data subject
You may request access to your data, correction of inaccuracies, deletion where no legal ground remains, restriction while an accuracy dispute is resolved, objection to legitimate-interest processing, a portable copy, and withdrawal of consent at any time. Requests go to [email protected] and are answered within one month, extendable for complex cases with notice. You may also complain to the Information Commissioner's Office.
Service providers, analytics and advertising
Analytics, where used, runs in aggregate to answer questions like which guide pages new clients read before depositing. Advertising and retargeting technologies apply only with cookie consent and only for our own communications. The provider list is short: verification, hosting, email delivery, payment and exchange venues, each under contract.
Third-party links, children, changes and contact
Links lead to third-party sites with their own privacy practices, which we do not control. The service is not directed at persons under 18 and we do not knowingly collect their data; write to us and we will delete it. This policy may change with the service or the law; the published version is current and material changes are announced by email. For any privacy question: [email protected], Client Support & Compliance, Hardman Square, Spinningfields, Manchester M3 3HF, United Kingdom, during Monday to Friday, 9:00–17:30 GMT/BST (excluding public holidays).